wp_start_cross_origin_isolation_output_buffer()WP 7.1.0

Sends the Document-Isolation-Policy header for cross-origin isolation.

Uses an output buffer to add crossorigin="anonymous" where needed.

No Hooks.

Returns

null. Nothing (null).

Usage

wp_start_cross_origin_isolation_output_buffer(): void;

Changelog

Since 7.1.0 Introduced.

wp_start_cross_origin_isolation_output_buffer() code WP 7.1

function wp_start_cross_origin_isolation_output_buffer(): void {
	$chromium_version = wp_get_chromium_major_version();

	if ( null === $chromium_version || $chromium_version < 137 ) {
		return;
	}

	ob_start(
		static function ( string $output ): string {
			header( 'Document-Isolation-Policy: isolate-and-credentialless' );

			return wp_add_crossorigin_attributes( $output );
		}
	);
}